If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

ATTENTION: Windows 10 users

Beta 2 build is now available!

If you just upgraded to Windows 10 or running build 10240 or greater of Win 10 pre-release you will need to download and install the new version of ZoneAlarm 14.0.157.000

Isass.exe

On several occasions Zone Alarm firewall has given me the elert about Isass.exe wanting to act as a server and access the Internet.
I have denied permission because I did not know what it was.

Then I found out by clicking on more information and it said it was OK to allow it.
When I did a search for the file, nothing came up.
If it was a system file it should have shouldn't it.
When I did a search on the intenet I found out that it could be malware.
In my task manager it shows it running under proccesses and that it is a system file.
I am really confused and am being very cautious.
Nothing seems to be compromised and none of the many virus, trojan and malware scans that I have done have come up with anything.
If I have denied access to it, why does it show it running in the task manager under proccesses?
Please advise.
Thank you.

Re: Isass.exe

Hi

Is that Isass.exe or Lsass.exe?

Lsass.exe is a legit Windows component, if it is in the C\WINDOWS\System32 folder. Just look for it and right click it and examine the properties. The time and date should coincide with the Windows Install. Plus the version and owner can be found verifing if it is from Microsoft.

Yes there are worms and various malware posing as lsass.exe
These should be held in check if you have all of Microsoft the updates. And scan with an updated antivirus.

Dening access in the ZA Program Control will not stop it from runninng. That requires the "Kill" in the right click Options in the ZA itself. So yes, it will still appear in the Task Manager.

It does not require Internet access or any server rights of any kind. Just Trusted Access and a three green bar rating. Ask for internet access is acceptable.